16139 matches found
EPSON WF-2750 HTML Injection Vulnerability
The EPSON WF-2750 is a printer device from the Japanese company Epson EPSON. An HTML injection vulnerability exists in the AirPrint Setup page of the web interface in EPSON WF-2750 printers using firmware version JP02I2, which originates when the printer web server fails to properly check the...
CVE-2018-14899
On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites...
CVE-2018-14899
On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites...
Design/Logic Flaw
On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites...
CVE-2018-14899
CVE-2018-14899 affects the EPSON WF-2750 printer with firmware JP02I2. The Web interface AirPrint Setup page is vulnerable to HTML injection, enabling redirection of users to malicious sites. Multiple connected sources (NVD entry, CNVD, CNVD-style EUVD/NASL references, and Nessus/OT plugin contex...
CVE-2018-14899
On the EPSON WF-2750 printer with firmware JP02I2, the Web interface AirPrint Setup page is vulnerable to HTML Injection that can redirect users to malicious sites...
Design/Logic Flaw
Inappropriate implementation in V8 WebAssembly JS bindings in Google Chrome prior to 63.0.3239.108 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...
CVE-2017-15429
Inappropriate implementation in V8 WebAssembly JS bindings in Google Chrome prior to 63.0.3239.108 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...
CVE-2018-15884
RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter...
CVE-2018-15608
Zoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the "AD Delegation" "Help Desk Technicians" screen...
CVE-2018-15608
Zoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the "AD Delegation" "Help Desk Technicians" screen...
CVE-2017-15430
Insufficient data validation in Chromecast plugin in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...
Design/Logic Flaw
RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter...
Design/Logic Flaw
Zoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the "AD Delegation" "Help Desk Technicians" screen...
CVE-2018-15884
CVE-2018-15884 affects Ricoh MP C4504ex devices, where the vulnerability is an HTML Injection (cross-site scripting) via the /web/entry/en/address/adrsSetUserWizard.cgi?entryNameIn parameter. The exposed component is the web UI handling address user wizard input; root cause is improper handling o...
CVE-2018-15608
Zoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the "AD Delegation" "Help Desk Technicians" screen...
CVE-2018-15884
RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter...
CVE-2018-15608
CVE-2018-15608 affects Zoho ManageEngine ADManager Plus 6.5.7. The issue is HTML Injection on the AD Delegation → Help Desk Technicians screen, indicating user-supplied input could be reflected and interpreted as markup in that UI. The connected documents confirm the vulnerability type as HTML In...
RICOH MP C4504ex Printer - Cross-Site Request Forgery (Add Admin) Vulnerability
Exploit for hardware platform in category web applications Exploit Title: RICOH MP C4504ex Printer - Cross-Site Request Forgery Add Admin Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link :...
RICOH MP C4504ex Printer - Cross-Site Request Forgery (Add Admin)
RICOH MP C4504ex Printer - Cross-Site Request Forgery Add Admin Exploit Title: RICOH MP C4504ex Printer - Cross-Site Request Forgery Add Admin Date: 2018-08-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link :...